58 matches found
CVE-2023-40546 Shim: out-of-bounds read printing error messages
A flaw was found in Shim when an error happened while creating a new ESL variable. If Shim fails to create the new variable, it tries to print an error message to the user; however, the number of parameters used by the logging function doesn't match the format string used by it, leading to a cras...
CVE-2023-40546 Shim: out-of-bounds read printing error messages
A flaw was found in Shim when an error happened while creating a new ESL variable. If Shim fails to create the new variable, it tries to print an error message to the user; however, the number of parameters used by the logging function doesn't match the format string used by it, leading to a cras...
CVE-2023-40546 Shim: out-of-bounds read printing error messages
A flaw was found in Shim when an error happened while creating a new ESL variable. If Shim fails to create the new variable, it tries to print an error message to the user; however, the number of parameters used by the logging function doesn't match the format string used by it, leading to a cras...
CVE-2023-40546
CVE-2023-40546 involves the shim/rhboot component. IBM and related advisories describe a vulnerability in the Shim boot path where a NULL pointer dereference can occur in the mirror_one_esl() function (mok.c), leading to a denial of service/crash when handling certain requests. The issue is discu...
CVE-2023-40546
creationtimestamp| type| source ---|---|--- 2024-01-25 18:46:45+00:00| seen| https://t.me/ctinow/173684 2024-01-29 18:22:18+00:00| seen| https://t.me/ctinow/175436...
CVE-2023-40546
A flaw was found in Shim when an error happened while creating a new ESL variable. If Shim fails to create the new variable, it tries to print an error message to the user; however, the number of parameters used by the logging function doesn't match the format string used by it, leading to a cras...
EulerOS 2.0 SP11 : shim (EulerOS-SA-2023-3259)
According to the versions of the shim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A vulnerability classified as critical has been found in rhboot shim up to 15.7 on ARM. This affects the function mirroroneesl of the file mok.c o...
EulerOS 2.0 SP11 : shim (EulerOS-SA-2023-3287)
According to the versions of the shim package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A vulnerability classified as critical has been found in rhboot shim up to 15.7 on ARM. This affects the function mirroroneesl of the file mok.c of...
Huawei EulerOS: Security Advisory for shim (EulerOS-SA-2023-3259)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for shim (EulerOS-SA-2023-3287)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
OESA-2023-1800 shim security update
Initial UEFI bootloader that handles chaining to a trusted full \ bootloader under secure boot environments. Security Fixes: A vulnerability classified as critical has been found in rhboot shim up to 15.7 on ARM. This affects the function mirroroneesl of the file mok.c of the component mok...
CVE-2021-40546
creationtimestamp| type| source ---|---|--- 2023-09-05 22:16:47+00:00| seen| https://t.me/cibsecurity/69883...
CVE-2021-40546
Tenda AC6 USAC6V4.0RTLV02.03.01.26cn.bin allows attackers who have the administrator password to cause a denial of service device crash via a long string in the wifiPwd5G parameter to /goform/setWifi...
CVE-2021-40546
Tenda AC6 USAC6V4.0RTLV02.03.01.26cn.bin allows attackers who have the administrator password to cause a denial of service device crash via a long string in the wifiPwd5G parameter to /goform/setWifi...
CVE-2021-40546
CVE-2021-40546 affects Tenda AC6 (US_AC6V4.0RTL_V02.03.01.26_cn.bin). Described as a denial-of-service vulnerability caused by processing a long string in the wifiPwd_5G parameter sent to /goform/setWifi. Root cause: improper handling of an overly long wifi password field leading to device crash....
CVE-2022-40546
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2022. Notes: none...
